Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A839D996FAF411EE95796D43017001B1.roa
File: A839D996FAF411EE95796D43017001B1.roa (raw, json)
Hash identifier: HOz5DzzpRqiF7A2qdLPiUkI1HVSMfJMeHdxkvjv9VsU=
Subject key identifier: 97:E1:5C:D2:9B:05:03:F7:B9:10:8A:78:EB:18:EA:31:66:F1:4E:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: ACDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A839D996FAF411EE95796D43017001B1.roa
Signing time: Mon 15 Apr 2024 06:52:00 +0000
ROA not before: Mon 15 Apr 2024 06:51:56 +0000
ROA not after: Thu 30 May 2024 06:51:56 +0000
asID: 63139
IP address blocks: 154.94.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 05 May 2024 00:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44254 (0xacde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 06:51:56 2024 GMT
Not After : May 30 06:51:56 2024 GMT
Subject: CN=661cce90-6917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:1d:8b:34:2a:c4:a9:ab:46:b1:fa:c3:56:
35:c6:81:4e:57:74:00:82:3e:1a:e1:96:69:5e:e8:
5d:cd:3a:30:38:40:82:19:b4:ba:47:4c:f2:e6:d3:
03:ff:dd:31:b5:ff:88:83:83:27:12:d3:d5:b8:78:
6f:d9:6a:fb:08:35:18:a6:b2:ce:c8:fc:3e:06:b0:
59:71:0e:32:05:c6:47:0d:97:fa:8a:62:69:5f:ce:
ac:00:f6:86:90:33:f3:87:0d:92:d7:bf:fd:1c:ee:
4a:5f:ff:d0:31:c8:01:9c:81:0e:1d:7a:50:40:60:
88:b5:be:04:83:26:20:3e:79:17:3c:e2:1b:f3:e5:
94:3d:b3:8f:06:be:4a:2d:bc:ae:18:20:99:b5:6f:
5a:2e:4f:86:bf:59:f0:b0:df:64:ac:9d:ac:f7:e4:
51:07:b0:a5:91:61:00:d0:79:89:ca:37:7f:46:0d:
66:ef:79:b8:9e:0f:5a:76:51:e1:a4:fc:6c:df:ec:
20:ce:a1:78:d4:0d:42:1a:57:6b:be:5d:1d:e7:29:
c2:d4:a0:21:6b:5d:f3:40:9d:90:5c:a9:86:6f:82:
99:f1:20:3f:ad:b2:f0:f7:35:1b:e0:95:16:32:41:
4f:2b:e5:f5:26:c5:b9:0c:49:56:c1:82:e5:f7:ff:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E1:5C:D2:9B:05:03:F7:B9:10:8A:78:EB:18:EA:31:66:F1:4E:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A839D996FAF411EE95796D43017001B1.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.74.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:a9:32:82:15:ae:df:ce:0c:30:7d:d6:ef:3b:ac:00:52:d1:
48:0e:d4:eb:09:67:4a:88:4a:2d:28:48:3d:a9:c9:4f:f3:27:
e5:6b:13:e4:3e:6b:76:84:13:d5:24:8b:79:b4:42:2c:2a:dd:
41:bf:59:49:71:e0:54:72:be:c5:c5:4a:1f:79:61:0f:1c:b0:
ca:3d:9f:af:9f:10:44:56:50:42:e2:01:13:4e:f3:03:10:6f:
67:86:63:1c:d4:a9:ce:ad:32:8c:be:c4:37:7e:31:f4:68:5d:
6b:ab:16:f9:1c:69:8c:c1:af:e8:e7:7c:99:e8:bb:73:ce:21:
d3:4c:25:e4:a3:6b:cc:99:87:2c:cf:d5:dc:61:fc:06:64:e2:
cb:7d:a9:4b:ea:50:c2:91:15:ef:33:47:6b:50:1b:3a:5c:4f:
4f:0f:db:8e:d4:3a:69:48:fa:3d:d6:4c:fe:da:e5:45:14:80:
57:4e:72:7f:a8:e1:b3:f2:6d:e0:a0:fc:44:71:98:98:37:81:
14:74:39:ea:28:e6:3a:a7:b2:56:4f:43:c4:11:97:56:84:cb:
ac:f9:4a:17:4b:82:84:81:2c:c7:8f:c2:28:7e:30:6e:46:a9:
34:78:fd:66:21:18:1f:46:b3:77:3b:1b:d0:25:7d:c8:0f:61:
94:88:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:17 2024 by rpki-client on console-ams.rpki-client.org